2 ms·

> Except most bugs are about unforeseen states Study after study shows that's not true, unless you include buffer overflows and the various "reading and writin

> Except most bugs are about unforeseen states Study after study shows that's not true, unless you include buffer overflows and the various "reading and writing memory I didn't mean to because this pointer is wrong now" classes of bugs. It's possible to write logic errors, of course. You have to try much harder to write invalid state or memory errors.

gpderetta 2y ago
Parent said bugs, not security bugs.
- kstrauser 2y ago
  There's a fine line between a crash and a vulnerability.
  - gpderetta 2y ago
    not all bugs are crashing bugs, and not all crashing bugs are vulnerabilities (and not all vulnerabilities are crashing bugs, although they are all bugs).
grandempire 2y ago
Imagine a backlog full of buffer overflows and nil pointers.